Rail the Way! Operated by Whale Played LTD ("Whale Played", "we", "us", "our").
Last updated: 13 June 2026.
This Privacy Policy explains what information we collect when you play Rail the Way! (the "Game"), how we use it, who we share it with, and the choices and rights you have. The Game is available as a Telegram Mini App, as a web app, and as a native app on Google Play. By playing the Game you agree to the practices described here.
The Game is operated by Whale Played LTD. If you have any question about this policy or your data, contact us at [email protected].
We collect the minimum information needed to run the Game, save your progress, process purchases, and improve the experience.
| Category | Examples | Why |
|---|---|---|
| Telegram account data | Your Telegram user ID, first name, username, and language code, provided by Telegram when you open the Mini App. | To identify your account, save progress, run the leaderboard and referral features, and show the correct language. |
| Gameplay data | Best distance and scores, level and world progress, in-game gold, boosters, sticker album, hearts, win and login streaks, season pass progress, daily-claim history, and settings. | To save and restore your game across sessions and devices, and to run the leaderboards. |
| Purchase records | Which in-app items you bought and when. Payments are processed by Telegram (Stars) or Google; we do not receive or store your card or bank details. | To deliver and restore purchases and prevent fraud. |
| Device and usage data | Approximate region (from IP address, not stored as a precise location), device type and operating system, app version, language, session and event timestamps, and crash and performance diagnostics. | To keep the Game working, fix bugs, and understand how it is used. |
| Notification token | On the native Android app, a push notification token from Google Firebase Cloud Messaging, and a random per-install device identifier. | To send you the game reminders and updates you allow, and to group your devices. |
| Advertising identifiers | On the native iOS and Android apps only, an advertising identifier (Google Advertising ID or Apple IDFA) and limited device and ad-interaction data, processed by Google AdMob and its mediation partners when you choose to watch a rewarded video, and by Adjust for install attribution. | To show the opt-in rewarded video ads you choose to watch and to measure marketing. Not used in the Telegram or web version. |
We use a small number of trusted services to operate the Game. These act as our processors or as independent controllers under their own policies:
These providers may process limited device and event data on our behalf. We do not authorise them to use your data for their own unrelated purposes.
Where the EU or UK General Data Protection Regulation applies, we rely on: performance of a contract (to provide the Game you requested and save your progress); our legitimate interests (to secure, measure, and improve the Game, balanced against your rights); your consent where required (for example for push notifications and for certain analytics where local law requires it); and compliance with legal obligations (for example keeping certain transaction records).
We keep your saved game and purchase records for as long as your account is active. If you ask us to delete your account, we delete your saved game and analytics records associated with your identifier, except where we must keep limited records to comply with legal, tax, accounting, or fraud-prevention obligations. See our Account and Data Deletion page for how to request deletion.
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights by emailing [email protected]. You also have the right to complain to your local data protection authority.
The Game is not directed to children under the age required by your country (at least 13, and higher where local law requires). We do not knowingly collect personal data from children below that age. If you believe a child has provided us personal data, contact us and we will delete it.
Your information may be processed in countries other than your own, including by the service providers listed above. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect your data when it is transferred internationally.
We use reasonable technical and organisational measures to protect your information, and all data is sent over encrypted connections (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the Game.
Whale Played LTD
Email: [email protected]